$ rpki-client -vvvf rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/4ef3dcdf-2af4-4dfd-8667-18325556ef24.roa File: 4ef3dcdf-2af4-4dfd-8667-18325556ef24.roa (raw, json) Hash identifier: WhuwQ695geljXYxqMRXOnM7dTAxL8EGGqDTr7uem/K0= Subject key identifier: D5:0A:85:F5:C1:FB:C9:CA:A8:91:A2:4D:53:95:0A:53:C9:A8:D1:D9 Certificate issuer: /CN=b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08 Certificate serial: CA6D918F0C310A56DD817ED036CEDE6103013E Authority key identifier: 2E:18:E2:08:A1:82:57:1B:09:7D:D2:23:A7:16:9E:40:EB:E9:89:3D Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/4ef3dcdf-2af4-4dfd-8667-18325556ef24.roa Signing time: Sat 17 Oct 2026 00:10:05 +0000 ROA not before: Sat 17 Oct 2026 00:10:05 +0000 ROA not after: Fri 15 Jan 2027 23:59:59 +0000 asID: 8987 IP address blocks: 2600:f0fb:f000::/44 maxlen: 44 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/C_YbE0uKtxFUWCaxcH_V8K-E2gg.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/C_YbE0uKtxFUWCaxcH_V8K-E2gg.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/6a9537a8-a685-4b48-9fa8-8362e4fc47ae.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/6a9537a8-a685-4b48-9fa8-8362e4fc47ae.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 06 Nov 2026 22:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: ca:6d:91:8f:0c:31:0a:56:dd:81:7e:d0:36:ce:de:61:03:01:3e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08 Validity Not Before: Oct 17 00:10:05 2026 GMT Not After : Jan 15 23:59:59 2027 GMT Subject: serialNumber=ab9d92eba630d145dc424167389ad8ba1c2e20e40e6780c6912d3fa22e2e10a9, CN=fbb27576-cac2-4381-9a53-6c15e0dc26ff Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:83:83:60:7c:3d:44:53:14:60:9d:47:3b:74: b1:a9:2d:98:81:1d:39:a6:db:5a:e4:ef:09:4d:45: b2:b4:d4:41:05:62:b9:c3:ee:b6:dc:f0:aa:bb:f7: f2:13:7b:bc:67:c7:52:4b:1e:4b:3c:35:15:d3:fe: 3b:31:b8:dc:2a:5c:e4:bd:ed:a4:a6:d2:b3:91:57: b6:f0:0c:17:4a:2c:5b:b5:81:dc:58:c9:1a:79:d1: 93:84:c3:0f:e5:63:94:75:a7:a1:a3:71:4a:7e:05: 6e:87:3d:e1:96:00:37:eb:bb:ba:bd:5a:63:58:4b: d8:5f:28:95:39:e4:ba:5e:5e:35:14:2c:82:1b:f2: f3:41:7a:0f:95:bc:5c:af:04:b2:9e:99:0e:cb:11: 93:ff:27:39:2d:75:2f:32:1b:1a:59:a9:7e:b6:c2: 6b:57:fb:9e:b2:26:da:bb:b1:74:4f:d6:f7:bc:79: 96:da:1f:28:71:22:aa:c9:8d:4a:96:91:d9:50:5f: e2:e0:26:cc:36:18:c5:b1:67:61:d9:fa:53:71:5d: 73:f4:86:46:9c:ef:7f:67:55:f2:b7:e9:9c:37:fc: bd:64:06:03:0c:c6:91:13:f8:1f:6a:ed:bb:77:4b: 64:d8:01:8f:bc:45:a8:0d:51:01:19:0e:66:16:4d: 6c:a3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D5:0A:85:F5:C1:FB:C9:CA:A8:91:A2:4D:53:95:0A:53:C9:A8:D1:D9 X509v3 Authority Key Identifier: keyid:2E:18:E2:08:A1:82:57:1B:09:7D:D2:23:A7:16:9E:40:EB:E9:89:3D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/4ef3dcdf-2af4-4dfd-8667-18325556ef24.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/C_YbE0uKtxFUWCaxcH_V8K-E2gg.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2600:f0fb:f000::/44 Signature Algorithm: sha256WithRSAEncryption 99:7f:05:16:e6:23:74:b1:67:02:cb:2d:ff:c7:f2:9e:8f:7b: d2:2a:d6:31:9c:16:15:6a:53:a5:b6:34:cc:5c:1f:3e:4c:b6: 6f:bc:64:c4:f2:8b:6d:05:d5:35:ba:53:ff:74:94:8a:86:ec: 12:eb:e3:82:3d:fd:79:8a:d8:58:9a:40:ef:27:0d:e7:78:9a: 15:02:52:b6:fb:a9:d5:4a:dc:be:ce:a4:11:5c:5e:d9:27:6a: ad:5b:f2:1f:80:99:52:47:09:7a:3d:af:98:2e:fe:9a:e4:47: 85:7c:ac:bf:0c:f1:d8:2c:de:a1:bf:4c:15:e6:8b:29:92:b4: cb:2a:7e:e7:62:19:e4:48:59:03:ef:4e:08:a3:49:7b:7b:a7: ec:b5:30:54:26:30:3c:f6:bf:50:a2:bb:e0:2b:33:e4:6d:aa: 6d:0a:d3:3b:48:cd:8e:f7:03:5e:30:ad:1c:65:13:3e:61:e1: 75:3c:ff:59:b5:97:de:65:4b:57:c9:da:8b:50:4f:1b:29:65: db:b5:d0:db:09:86:d5:6d:8b:8e:b5:95:07:78:ae:33:fe:72: 0a:82:39:ee:77:d1:01:c6:18:b4:70:14:f3:59:81:5e:d8:9b: bc:de:ad:a7:83:6c:8d:5c:b1:a7:1a:2e:ce:67:82:8f:14:95: 23:2f:2a:20 -----BEGIN CERTIFICATE----- MIIF+zCCBOOgAwIBAgIUAMptkY8MMQpW3YF+0DbO3mEDAT4wDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyYjU4NDVjMzA3ZDBiZjYxYjEzNGI4YWI3MTE1NDU4MjZi MTcwN2ZkNWYwYWY4NGRhMDgwHhcNMjYxMDE3MDAxMDA1WhcNMjcwMTE1MjM1OTU5 WjB6MUkwRwYDVQQFE0BhYjlkOTJlYmE2MzBkMTQ1ZGM0MjQxNjczODlhZDhiYTFj MmUyMGU0MGU2NzgwYzY5MTJkM2ZhMjJlMmUxMGE5MS0wKwYDVQQDEyRmYmIyNzU3 Ni1jYWMyLTQzODEtOWE1My02YzE1ZTBkYzI2ZmYwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQC0g4NgfD1EUxRgnUc7dLGpLZiBHTmm21rk7wlNRbK01EEF YrnD7rbc8Kq79/ITe7xnx1JLHks8NRXT/jsxuNwqXOS97aSm0rORV7bwDBdKLFu1 gdxYyRp50ZOEww/lY5R1p6GjcUp+BW6HPeGWADfru7q9WmNYS9hfKJU55LpeXjUU LIIb8vNBeg+VvFyvBLKemQ7LEZP/JzktdS8yGxpZqX62wmtX+56yJtq7sXRP1ve8 eZbaHyhxIqrJjUqWkdlQX+LgJsw2GMWxZ2HZ+lNxXXP0hkac739nVfK36Zw3/L1k BgMMxpET+B9q7bt3S2TYAY+8RagNUQEZDmYWTWyjAgMBAAGjggK0MIICsDAdBgNV HQ4EFgQU1QqF9cH7ycqokaJNU5UKU8mo0dkwHwYDVR0jBBgwFoAULhjiCKGCVxsJ fdIjpxaeQOvpiT0wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy82YTk1MzdhOC1h Njg1LTRiNDgtOWZhOC04MzYyZTRmYzQ3YWUvYjU4NDVjMzA3ZDBiZjYxYjEzNGI4 YWI3MTE1NDU4MjZiMTcwN2ZkNWYwYWY4NGRhMDguY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvNTE3ZjNlZDctNThiNS00Nzk2LWJlMzctMTRk NjJlNDhmMDU2LzRlZjNkY2RmLTJhZjQtNGRmZC04NjY3LTE4MzI1NTU2ZWYyNC5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzUxN2YzZWQ3LTU4YjUtNDc5Ni1iZTM3 LTE0ZDYyZTQ4ZjA1Ni9DX1liRTB1S3R4RlVXQ2F4Y0hfVjhLLUUyZ2cuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIgYIKwYBBQUHAQcBAf8EEzARMA8EAgAC MAkDBwQmAPD78AAwDQYJKoZIhvcNAQELBQADggEBAJl/BRbmI3SxZwLLLf/H8p6P e9Iq1jGcFhVqU6W2NMxcHz5Mtm+8ZMTyi20F1TW6U/90lIqG7BLr44I9/XmK2Fia QO8nDed4mhUCUrb7qdVK3L7OpBFcXtknaq1b8h+AmVJHCXo9r5gu/prkR4V8rL8M 8dgs3qG/TBXmiymStMsqfudiGeRIWQPvTgijSXt7p+y1MFQmMDz2v1Ciu+ArM+Rt qm0K0ztIzY73A14wrRxlEz5h4XU8/1m1l95lS1fJ2otQTxspZdu10NsJhtVti461 lQd4rjP+cgqCOe530QHGGLRwFPNZgV7Ym7zeraeDbI1csacaLs5ngo8UlSMvKiA= -----END CERTIFICATE-----Generated at Thu Nov 5 08:59:47 2026 by rpki-client